CIRCL/vulnerability-attack-techniques huggingface dataset:
CVE-2019-12660: Cisco IOS XE Software ASIC Register Write Vulnerability
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device. The vulnerability is due to improper input validation and authorization of specific commands that a user can execute within the CLI. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to modify the configuration of the device to cause it to be non-secure and abnormally functioning.

Affected products: Cisco Cisco IOS XE Software 3.2.11aSG
CWE: CWE-668
CVSS: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
ATT&CK exploitation technique(s): T1078
ATT&CK primary impact: T1574
ATT&CK secondary impact: T1685
ATT&CK techniques (all): T1078, T1574, T1685
CVE-2018-10376: 
An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted _fee and _value parameters, as exploited in the wild in April 2018, aka the "proxyOverflow" issue.

ATT&CK techniques (all): T1203
CVE-2012-3213: 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

ATT&CK techniques (all): T1189, T1203
CVE-2020-6974: 
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem.

Affected products: Honeywell Notifier Web Server (NWS)
CWE: CWE-22 PATH TRAVERSAL CWE-22
ATT&CK techniques (all): T1005, T1190, T1565
CVE-2023-2533: PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in
PaperCut NG/MF, which, under specific conditions, could potentially enable
an attacker to alter security settings or execute arbitrary code. This could
be exploited if the target is an admin with a current login session. Exploiting
this would typically involve the possibility of deceiving an admin into clicking
a specially crafted malicious link, potentially leading to unauthorized changes.

Affected products: PaperCut PaperCut NG/MF
CWE: CWE-352 Cross-Site Request Forgery (CSRF)
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1566.002
ATT&CK primary impact: T1059, T1547
ATT&CK techniques (all): T1059, T1547, T1566.002
CVE-2020-5358: 
Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.

Affected products: Dell Dell Encryption Enterprise
CWE: CWE-732: Incorrect Permission Assignment for Critical Resource
CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
ATT&CK primary impact: T1068
ATT&CK techniques (all): T1068
CVE-2020-2883: 
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products: Oracle Corporation WebLogic Server
CWE: Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server., CWE-noinfo Not enough information
CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1190, T1203
CVE-2019-1790: Cisco NX-OS Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.

Affected products: Cisco Cisco NX-OS Software
CWE: CWE-77
CVSS: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1078
ATT&CK primary impact: T1059
ATT&CK secondary impact: T1068
ATT&CK techniques (all): T1059, T1068, T1078
CVE-2010-0842: 
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.

ATT&CK techniques (all): T1203
CVE-2018-15466: Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability
A vulnerability in the Graphite web interface of the Policy and Charging Rules Function (PCRF) of Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The vulnerability is due to lack of authentication. An attacker could exploit this vulnerability by directly connecting to the Graphite web interface. An exploit could allow the attacker to access various statistics and Key Performance Indicators (KPIs) regarding the Cisco Policy Suite environment.

Affected products: Cisco Cisco Policy Suite (CPS) Software
CWE: CWE-284
CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
ATT&CK primary impact: T1608
ATT&CK secondary impact: T1005
ATT&CK techniques (all): T1005, T1608
CVE-2020-11019: Out of bound read in update_recv in FreeRDP
In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.

Affected products: FreeRDP FreeRDP
CWE: CWE-125: Out-of-bounds Read
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
ATT&CK primary impact: T1005, T1499.004
ATT&CK secondary impact: T1211
ATT&CK techniques (all): T1005, T1211, T1499.004
CVE-2018-8337: 
A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.

Affected products: Microsoft Windows 10, Microsoft Windows 10 Servers
CWE: Security Feature Bypass
ATT&CK techniques (all): T1211, T1485, T1565
CVE-2019-6538: Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control
The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the product’s radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device.

Affected products: Medtronic Conexus Radio Frequency Telemetry Protocol, Medtronic MyCareLink Monitor, Medtronic CareLink Monitor, Medtronic CareLink 2090 Programmer, Medtronic Amplia CRT-D, Medtronic Claria CRT-D, Medtronic Compia CRT-D, Medtronic Concerto CRT-D, Medtronic Concerto II CRT-D, Medtronic Consulta CRT-D, Medtronic Evera ICD, Medtronic Maximo II CRT-D, Medtronic Maximo II ICD, Medtronic Mirro ICD, Medtronic Nayamed ND ICD, Medtronic Primo ICD, Medtronic Protecta ICD, Protecta CRT-D, Medtronic Secura ICD, Medtronic Virtuoso ICD, Medtronic Virtuoso II ICD, Medtronic Visia AF ICD, Medtronic Viva CRT-D, Medtronic Brava CRT-D, Medtronic Mirro MRI ICD
CWE: CWE-284
CVSS: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
ATT&CK primary impact: T1005, T1499.004, T1557, T1574
ATT&CK techniques (all): T1005, T1499.004, T1557, T1574
CVE-2019-9978: 
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.

CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ATT&CK techniques (all): T1055, T1189
CVE-2018-5445: 
A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the target device.

Affected products: Advantech WebAccess/SCADA
CWE: CWE-22
ATT&CK primary impact: T1005
ATT&CK techniques (all): T1005
CVE-2018-8611: 
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Affected products: Microsoft Windows 7, Microsoft Windows Server 2012 R2, Microsoft Windows RT 8.1, Microsoft Windows Server 2008, Microsoft Windows Server 2019, Microsoft Windows Server 2012, Microsoft Windows 8.1, Microsoft Windows Server 2016, Microsoft Windows Server 2008 R2, Microsoft Windows 10, Microsoft Windows 10 Servers
CWE: Elevation of Privilege, CWE-404 Improper Resource Shutdown or Release
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1190
CVE-2012-1557: 
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in March 2012.

ATT&CK techniques (all): T1190
CVE-2024-29059: .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability

Affected products: Microsoft Microsoft .NET Framework 4.8, Microsoft Microsoft .NET Framework 3.5 AND 4.8, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft Microsoft .NET Framework 4.6.2, Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.2, Microsoft Microsoft .NET Framework 2.0 Service Pack 2, Microsoft Microsoft .NET Framework 3.0 Service Pack 2, Microsoft Microsoft .NET Framework 3.5, Microsoft Microsoft .NET Framework 3.5.1
CWE: CWE-209: Generation of Error Message Containing Sensitive Information
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
ATT&CK exploitation technique(s): T1068
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1068
CVE-2020-5269: Reflected XSS on AdminFeatures page of PrestaShop
In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feature` parameter. The problem is fixed in 1.7.6.5

Affected products: PrestaShop PrestaShop
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
ATT&CK exploitation technique(s): T1204.001
ATT&CK primary impact: T1059.007
ATT&CK secondary impact: T1557
ATT&CK techniques (all): T1059.007, T1204.001, T1557
CVE-2025-31201: 
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

Affected products: Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS
CWE: An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS., CWE-1220 Insufficient Granularity of Access Control
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1203
ATT&CK primary impact: T1105
ATT&CK secondary impact: T1001, T1059, T1106, T1557, T1685
ATT&CK techniques (all): T1001, T1059, T1105, T1106, T1203, T1557, T1685
CVE-2017-9142: 
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.

ATT&CK techniques (all): T1499.004
CVE-2020-8648: 
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

ATT&CK techniques (all): T1499.004
CVE-2018-8599: 
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability." This affects Microsoft Visual Studio, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.

Affected products: Microsoft Microsoft Visual Studio, Microsoft Windows Server 2019, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows 10 Servers
CWE: Elevation of Privilege
ATT&CK techniques (all): T1068
CVE-2023-7101: Arbitrary Code Execution (ACE) Vulnerability
Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.

Affected products: Douglas Wilson Spreadsheet::ParseExcel, jmcnamara spreadsheet\, debian debian_linux, fedoraproject fedora
CWE: CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1190
ATT&CK primary impact: T1059
ATT&CK secondary impact: T1105
ATT&CK techniques (all): T1059, T1105, T1190
CVE-2020-14059: 
An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.

ATT&CK techniques (all): T1499.004
CVE-2013-0640: 
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

CWE: CWE-787 Out-of-bounds Write
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1566.001
ATT&CK techniques (all): T1068, T1078, T1190, T1566.001
CVE-2021-21206: 
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products: Google Chrome
CWE: CWE-416 Use After Free
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1059.007, T1203
ATT&CK techniques (all): T1059.007, T1203
CVE-2019-15994: Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected products: Cisco Cisco Stealthwatch Enterprise
CWE: CWE-79
CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
ATT&CK exploitation technique(s): T1204.001
ATT&CK primary impact: T1059.007
ATT&CK secondary impact: T1557
ATT&CK techniques (all): T1059.007, T1204.001, T1557
CVE-2020-15094: RCE in Symfony
In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests. HttpCache uses internal headers like X-Body-Eval and X-Body-File to control the restoration of cached responses. The class was initially written with surrogate caching and ESI support in mind (all HTTP calls come from a trusted backend in that scenario). But when used by CachingHttpClient and if an attacker can control the response for a request being made by the CachingHttpClient, remote code execution is possible. This has been fixed in versions 4.4.13 and 5.1.5.

Affected products: symfony symfony
CWE: CWE-212 {"CWE-212":"Improper Removal of Sensitive Information Before Storage or Transfer"}
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1040
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1040, T1059
CVE-2013-0632: 
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013.

CWE: CWE-276 Incorrect Default Permissions
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1190
ATT&CK techniques (all): T1190
CVE-2017-0022: 
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."

Affected products: Microsoft Corporation XML Core Services
CWE: Information Disclosure, CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
ATT&CK techniques (all): T1189, T1518.001
CVE-2024-50302: HID: core: zero-initialize the report buffer
In the Linux kernel, the following vulnerability has been resolved:

HID: core: zero-initialize the report buffer

Since the report buffer is used by all kinds of drivers in various ways, let's
zero-initialize it during allocation to make sure that it can't be ever used
to leak kernel memory via specially-crafted report.

Affected products: Linux Linux, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
CWE: CWE-908 Use of Uninitialized Resource
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
ATT&CK exploitation technique(s): T1091
ATT&CK primary impact: T1005
ATT&CK secondary impact: T1011
ATT&CK techniques (all): T1005, T1011, T1091
CVE-2022-26904: Windows User Profile Service Elevation of Privilege Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability

Affected products: Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008  Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)
CWE: Elevation of Privilege, CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
ATT&CK exploitation technique(s): T1078
ATT&CK primary impact: T1068
ATT&CK techniques (all): T1068, T1078
CVE-2024-4671: 
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected products: Google Chrome, google chrome, fedoraproject fedora
CWE: CWE-416 Use After Free
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1189
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1189
CVE-2010-2152: 
Unspecified vulnerability in JustSystems Ichitaro 2004 through 2009, Ichitaro Government 2006 through 2009, and Just School 2008 and 2009 allows remote attackers to execute arbitrary code via unknown vectors related to "product character attribute processing" for a document.

ATT&CK techniques (all): T1203